container: optionally isolate host abstract UNIX domain sockets via landlock

package.nix

@@ -89,19 +89,18 @@ buildGoModule rec {
     GO_TEST_SKIP_ACL = 1;
   };
 
-  buildInputs =
+  buildInputs = [
-    [
+    libcap
-      libcap
+    libffi
-      libffi
+    libseccomp
-      libseccomp
+    acl
-      acl
+    wayland
-      wayland
+  ]
-    ]
+  ++ (with xorg; [
-    ++ (with xorg; [
+    libxcb
-      libxcb
+    libXau
-      libXau
+    libXdmcp
-      libXdmcp
+  ]);
-    ]);
 
   nativeBuildInputs = [
     pkg-config
@@ -137,17 +136,16 @@ buildGoModule rec {
         }
     '';
 
-  passthru.targetPkgs =
+  passthru.targetPkgs = [
-    [
+    go
-      go
+    gcc
-      gcc
+    xorg.xorgproto
-      xorg.xorgproto
+    util-linux
-      util-linux
 
-      # for go generate
+    # for go generate
-      wayland-protocols
+    wayland-protocols
-      wayland-scanner
+    wayland-scanner
-    ]
+  ]
-    ++ buildInputs
+  ++ buildInputs
-    ++ nativeBuildInputs;
+  ++ nativeBuildInputs;
 }